@voltro/protocol 0.69.0 → 0.70.0

package/dist/index.js

@@ -1,20 +1,20 @@
 import { A as e, B as t, C as n, D as r, E as i, F as a, G as o, H as s, I as c, K as ee, L as te, M as ne, N as re, O as ie, P as l, R as ae, S as oe, T as se, U as ce, V as le, W as ue, _ as de, a as u, b as fe, c as pe, d as me, f as he, g as d, h as ge, i as _e, j as ve, k as ye, l as be, m as xe, n as Se, o as Ce, p as we, q as Te, r as Ee, s as De, t as Oe, u as ke, v as Ae, w as je, x as Me, y as f, z as Ne } from "./scopes-DVtiKKsm.js";
-import { a as Pe, c as Fe, d as Ie, i as p, l as Le, n as Re, o as ze, r as Be, s as Ve, t as He, u as Ue } from "./serverErrorBus-BTnTpMqj.js";
-import { Context as We, Layer as Ge, Schema as m } from "effect";
+import { S as Pe, _ as Fe, a as Ie, b as Le, c as Re, d as ze, f as Be, g as Ve, h as p, i as He, l as Ue, m as We, n as Ge, o as Ke, p as qe, r as Je, s as Ye, t as Xe, u as Ze, v as Qe, x as $e, y as et } from "./restFormat-Bnngx-zI.js";
+import { Context as tt, Layer as nt, Schema as m } from "effect";
 import { Rpc as h } from "@effect/rpc";
-import { VersionConflict as Ke } from "@voltro/database/wire";
+import { VersionConflict as rt } from "@voltro/database/wire";
 //#region src/rowPatch.ts
-var qe = m.Union(m.String, m.Number), Je = m.Record({
+var it = m.Union(m.String, m.Number), g = m.Record({
 	key: m.String,
 	value: m.Unknown
-}).pipe(m.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), Ye = m.Union(m.Struct({
+}).pipe(m.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), at = m.Union(m.Struct({
 	op: m.Literal("add"),
 	path: m.String,
-	value: Je
+	value: g
 }), m.Struct({
 	op: m.Literal("replace"),
 	path: m.String,
-	value: Je
+	value: g
 }), m.Struct({
 	op: m.Literal("remove"),
 	path: m.String
@@ -25,14 +25,14 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		key: m.String,
 		value: m.Unknown
 	})
-})), Xe = m.Struct({
-	ops: m.Array(Ye),
-	order: m.Array(qe)
-}), g = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, _ = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), v = (e) => {
+})), ot = m.Struct({
+	ops: m.Array(at),
+	order: m.Array(it)
+}), _ = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, st = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), v = (e) => {
 	let t = Object.keys(e).sort(), n = {};
 	for (let r of t) n[r] = e[r];
 	return JSON.stringify(n);
-}, y = (e, t) => v(e) === v(t), Ze = (e, t) => {
+}, y = (e, t) => v(e) === v(t), ct = (e, t) => {
 	if (e instanceof Uint8Array && t instanceof Uint8Array) {
 		if (e.length !== t.length) return !1;
 		for (let n = 0; n < e.length; n += 1) if (e[n] !== t[n]) return !1;
@@ -45,14 +45,14 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		id: 0,
 		v: t
 	});
-}, Qe = (e, t, n = {}) => {
+}, lt = (e, t, n = {}) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) r.set(t.id, t);
 	let i = [], a = [], o = /* @__PURE__ */ new Set(), s = n.crdt, c = (e, t) => {
 		if (s === void 0 || s.columns.size === 0) return;
 		let n = {}, r = !1;
 		for (let i of s.columns) {
-			if (!(i in t) || Ze(e[i], t[i])) continue;
+			if (!(i in t) || ct(e[i], t[i])) continue;
 			let a = s.incremental(i, e[i], t[i]);
 			if (a === void 0) return;
 			n[i] = a, r = !0;
@@ -70,43 +70,43 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		let t = r.get(e.id);
 		if (t === void 0) i.push({
 			op: "add",
-			path: g(e.id),
+			path: _(e.id),
 			value: e
 		});
 		else if (!y(t, e)) {
 			let n = c(t, e);
 			n === void 0 ? i.push({
 				op: "replace",
-				path: g(e.id),
+				path: _(e.id),
 				value: e
 			}) : (y(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
 				op: "replace",
-				path: g(e.id),
+				path: _(e.id),
 				value: n.scalars
 			}), i.push({
 				op: "mergeCells",
-				path: g(e.id),
+				path: _(e.id),
 				value: n.merges
 			}));
 		}
 	}
 	for (let t of e) o.has(t.id) || i.push({
 		op: "remove",
-		path: g(t.id)
+		path: _(t.id)
 	});
 	return {
 		ops: i,
 		order: a
 	};
-}, $e = (e) => e.every((e) => {
+}, ut = (e) => e.every((e) => {
 	let t = e.id;
 	return typeof t == "string" || typeof t == "number";
-}), et = (e, t, n = {}) => {
+}), dt = (e, t, n = {}) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) r.set(t.id, t);
 	for (let e of t.ops) {
 		if (e.op === "mergeCells") {
-			let t = _(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
+			let t = st(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
 			if (i === void 0) continue;
 			let o = { ...i };
 			for (let [t, r] of Object.entries(e.value)) o[t] = n.mergeCell === void 0 ? r : n.mergeCell(t, i[t], r);
@@ -131,7 +131,7 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	_tag: m.Literal("delta"),
 	revision: m.Number,
 	emittedAt: m.Number,
-	patch: Xe
+	patch: ot
 }), m.Struct({
 	_tag: m.Literal("error"),
 	error: m.Unknown,
@@ -139,7 +139,7 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 })), x = (e, t) => {
 	let n = `${e ?? "this procedure"} input`;
 	return t === !0 ? `${n} (guarded — the guard did NOT run: the payload failed to decode first, so this says nothing about access)` : n;
-}, tt = (e) => {
+}, ft = (e) => {
 	let t = e.ast;
 	return t._tag === "TypeLiteral" && (t.propertySignatures?.length ?? 0) === 0 && (t.indexSignatures?.length ?? 0) === 0;
 }, S = (e, t, n) => {
@@ -147,8 +147,8 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		parseOptions: { onExcessProperty: "error" },
 		parseIssueTitle: () => r
 	});
-	return tt(e) ? m.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
-}, nt = class extends m.TaggedError()("BusinessRuleViolation", {
+	return ft(e) ? m.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
+}, pt = class extends m.TaggedError()("BusinessRuleViolation", {
 	rule: m.String,
 	params: m.optional(m.Record({
 		key: m.String,
@@ -157,21 +157,21 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	field: m.optional(m.String),
 	message: m.optional(m.String),
 	severity: m.Literal("error", "warning")
-}) {}, rt = m.Struct({
+}) {}, mt = m.Struct({
 	field: m.String,
 	message: m.String,
 	params: m.optional(m.Record({
 		key: m.String,
 		value: m.Unknown
 	}))
-}), it = class extends m.TaggedError()("ValidationError", {
+}), ht = class extends m.TaggedError()("ValidationError", {
 	field: m.String,
 	message: m.String,
 	params: m.optional(m.Record({
 		key: m.String,
 		value: m.Unknown
 	}))
-}) {}, at = class extends m.TaggedError()("ValidationErrors", { issues: m.Array(rt).pipe(m.minItems(1)) }) {}, ot = (e) => {
+}) {}, gt = class extends m.TaggedError()("ValidationErrors", { issues: m.Array(mt).pipe(m.minItems(1)) }) {}, _t = (e) => {
 	if (typeof e != "object" || !e) return [];
 	let t = e._tag;
 	if (t === "ValidationError") {
@@ -197,34 +197,34 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		}];
 	}
 	return [];
-}, st = class extends m.TaggedError()("ApprovalRequired", {
+}, vt = class extends m.TaggedError()("ApprovalRequired", {
 	approvalId: m.String,
 	procedure: m.String,
 	expiresAt: m.String,
 	requiredScopes: m.Array(m.String),
 	reason: m.NullOr(m.String),
 	created: m.Boolean
-}) {}, ct = class extends m.TaggedError()("ApprovalNotFound", { approvalId: m.String }) {}, lt = class extends m.TaggedError()("ApprovalSelfApproval", {
+}) {}, yt = class extends m.TaggedError()("ApprovalNotFound", { approvalId: m.String }) {}, bt = class extends m.TaggedError()("ApprovalSelfApproval", {
 	approvalId: m.String,
 	subjectId: m.NullOr(m.String)
-}) {}, ut = class extends m.TaggedError()("ApprovalRejected", {
+}) {}, xt = class extends m.TaggedError()("ApprovalRejected", {
 	approvalId: m.String,
 	decidedBy: m.NullOr(m.String),
 	note: m.NullOr(m.String)
 }) {}, C = class extends m.TaggedError()("ApprovalExpired", {
 	approvalId: m.String,
 	expiredAt: m.String
-}) {}, dt = class extends m.TaggedError()("ApprovalNotPending", {
+}) {}, St = class extends m.TaggedError()("ApprovalNotPending", {
 	approvalId: m.String,
 	status: m.String
-}) {}, ft = class extends m.TaggedError()("ApprovalForbidden", {
+}) {}, Ct = class extends m.TaggedError()("ApprovalForbidden", {
 	approvalId: m.String,
 	required: m.NullOr(m.String),
 	message: m.String
 }) {}, w = class extends m.TaggedError()("ApprovalUnavailable", {
 	procedure: m.String,
 	message: m.String
-}) {}, pt = m.Union(st, ut, C, w), mt = m.Union(ct, lt, C, dt, ft, w), ht = m.Struct({
+}) {}, wt = m.Union(vt, xt, C, w), Tt = m.Union(yt, bt, C, St, Ct, w), Et = m.Struct({
 	id: m.String,
 	procedure: m.String,
 	kind: m.Literal("mutation", "action"),
@@ -238,8 +238,8 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	decidedAt: m.NullOr(m.String),
 	note: m.NullOr(m.String),
 	relation: m.Literal("to-decide", "requested")
-}), T = "channel:", gt = Symbol.for("@voltro/protocol/reactivityChannels"), _t = globalThis, E = _t[gt] ?? (_t[gt] = /* @__PURE__ */ new Map()), vt = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, yt = (e) => {
-	if (!vt.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
+}), T = "channel:", Dt = Symbol.for("@voltro/protocol/reactivityChannels"), Ot = globalThis, E = Ot[Dt] ?? (Ot[Dt] = /* @__PURE__ */ new Map()), kt = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, At = (e) => {
+	if (!kt.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
   \`billing.usage\`. A \`:\` is refused because it is the namespace separator in
   the routing key (\`${T}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
   routes as two.`);
@@ -252,14 +252,14 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		toString: () => n
 	});
 	return E.set(e, r), r;
-}, D = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", O = (e) => e.startsWith(T), k = () => new Set([...E.values()].map((e) => e.key)), A = (e) => D(e) ? e.key : e, j = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(A) : [A(e)], M = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(A) : A(e), bt = (e) => {
+}, D = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", O = (e) => e.startsWith(T), k = () => new Set([...E.values()].map((e) => e.key)), A = (e) => D(e) ? e.key : e, j = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(A) : [A(e)], M = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(A) : A(e), jt = (e) => {
 	let t = k(), n = [];
 	for (let r of e) for (let e of j(r.source)) O(e) && !t.has(e) && n.push({
 		procedure: r.name,
 		key: e
 	});
 	return n;
-}, xt = (e, t) => {
+}, Mt = (e, t) => {
 	let n = e?.injectExternalChange;
 	return n !== void 0 && (n.call(e, {
 		table: t.key,
@@ -268,13 +268,18 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		old: {},
 		origin: "inline"
 	}), !0);
-}, St = (e) => e.internal !== !0, N = (e) => {
-	if (Ct(e), e.idempotencyScope !== void 0 && e.idempotencyScope !== "subject" && e.idempotencyScope !== "connection") throw Error(`${e.name}: idempotencyScope must be 'subject' or 'connection'`);
+}, Nt = (e) => e.internal !== !0, N = (e) => {
+	if (Pt(e), e.idempotencyScope !== void 0 && e.idempotencyScope !== "subject" && e.idempotencyScope !== "connection") throw Error(`${e.name}: idempotencyScope must be 'subject' or 'connection'`);
+	let t = e.serialize;
+	if (t !== void 0) {
+		if (typeof t.key != "function") throw Error(`${e.name}: serialize.key must be a function of the input`);
+		if (t.maxPending !== void 0 && (!Number.isSafeInteger(t.maxPending) || t.maxPending < 1)) throw Error(`${e.name}: serialize.maxPending must be a positive integer`);
+	}
 	if (e.idempotencyScope === "connection" && (e.internal === !0 || e.publicApi !== void 0 || e.exposeAsTool !== void 0)) throw Error(`${e.name}: connection-scoped mutations require the native WebSocket RPC surface; internal, publicApi and exposeAsTool cannot establish its connection state`);
 	if (Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
   unguarded procedure, or list the scopes required to call it.`);
-	let t = typeof e.source == "string" ? [e.source] : Array.isArray(e.source) ? e.source : void 0;
-	if (t !== void 0 && (t.length === 0 || t.some((e) => String(e).trim() === ""))) throw Error(`${e.name}: \`source\` is empty, so this query declares reactivity and\n  subscribes to nothing — it serves one snapshot and never updates again,
+	let n = typeof e.source == "string" ? [e.source] : Array.isArray(e.source) ? e.source : void 0;
+	if (n !== void 0 && (n.length === 0 || n.some((e) => String(e).trim() === ""))) throw Error(`${e.name}: \`source\` is empty, so this query declares reactivity and\n  subscribes to nothing — it serves one snapshot and never updates again,
   which is indistinguishable from "nothing changed". Name the table(s) it
   reads, or omit \`source\` for a non-reactive query.`);
 	if (e.internal !== !0) return e;
@@ -285,10 +290,10 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	if (e.overridesPlugin === !0) throw Error(`${e.name}: \`internal: true\` cannot be combined with \`overridesPlugin\`.\n  The override REMOVES the plugin route, and an internal procedure is not
   wire-reachable — so the plugin's route would vanish with nothing callable
   in its place, and callers would get a 404 for something that used to work.`);
-	let n = [e.publicApi === void 0 ? void 0 : "publicApi", e.exposeAsTool === void 0 ? void 0 : "exposeAsTool"].filter((e) => e !== void 0);
-	if (n.length === 0) return e;
-	throw Error(`${e.name}: \`internal: true\` cannot be combined with ${n.map((e) => `\`${e}\``).join(" or ")}. \`internal\` takes the procedure OFF the wire; those put it back ON a different one (${n.includes("publicApi") ? "a REST route" : "an agent tool"}), and that surface is projected without consulting the flag — so the procedure would be unreachable from your client and reachable from the internet. Drop \`internal: true\` if the wider surface is intended, or remove the ${n.join(" / ")} annotation if it is not.`);
-}, Ct = (e) => {
+	let r = [e.publicApi === void 0 ? void 0 : "publicApi", e.exposeAsTool === void 0 ? void 0 : "exposeAsTool"].filter((e) => e !== void 0);
+	if (r.length === 0) return e;
+	throw Error(`${e.name}: \`internal: true\` cannot be combined with ${r.map((e) => `\`${e}\``).join(" or ")}. \`internal\` takes the procedure OFF the wire; those put it back ON a different one (${r.includes("publicApi") ? "a REST route" : "an agent tool"}), and that surface is projected without consulting the flag — so the procedure would be unreachable from your client and reachable from the internet. Drop \`internal: true\` if the wider surface is intended, or remove the ${r.join(" / ")} annotation if it is not.`);
+}, Pt = (e) => {
 	let t = e.requiresApproval;
 	if (t !== void 0) {
 		if (!Array.isArray(t.approvers) || t.approvers.length === 0) throw Error(`${e.name}: \`requiresApproval.approvers\` is empty, so NOBODY can approve this\n  procedure and every call would park forever. Name the scope(s) an approver must hold
@@ -298,7 +303,7 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
   human from every other, and the second-pair-of-eyes control would enforce nothing.
   Give the procedure a \`guards:\` decision, or drop \`requiresApproval\`.`);
 	}
-}, wt = (e) => e.action !== void 0 && e.resourceType !== void 0, Tt = (e) => e.authenticated === !0, Et = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, P = (e, t, n) => {
+}, Ft = (e) => e.action !== void 0 && e.resourceType !== void 0, It = (e) => e.authenticated === !0, Lt = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, P = (e, t, n) => {
 	if (n === void 0) return t;
 	if (n.trim() === "") throw Error(`${e}: \`openAccess\` needs a REASON, not an empty string. It is the sentence a\n  reviewer reads to decide whether this procedure should really be callable
   without an authorization check — e.g. \`openAccess: 'public pricing, no caller data'\`.`);
@@ -326,6 +331,7 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	output: e.output,
 	error: e.error ?? m.Never,
 	...e.idempotencyScope === void 0 ? {} : { idempotencyScope: e.idempotencyScope },
+	...e.serialize === void 0 ? {} : { serialize: e.serialize },
 	target: e.target,
 	guards: P(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
@@ -349,7 +355,7 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), Dt = (e) => N({
+}), Rt = (e) => N({
 	kind: "stream",
 	name: e.name,
 	input: e.input,
@@ -359,45 +365,45 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	overridesPlugin: e.overridesPlugin,
 	guards: P(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess
-}), R = (e, t) => t && t.length > 0 ? m.Union(e, ...t) : e, z = (e) => e !== void 0 && e.some((e) => !d(e)), Ot = (e, t) => z(t) ? m.Union(e, u, l) : e, kt = (e) => m.Union(e, nt), At = (e) => m.Union(e, it, at), jt = (e, t) => t === void 0 ? e : m.Union(e, pt), B = (e, t) => {
+}), R = (e, t) => t && t.length > 0 ? m.Union(e, ...t) : e, z = (e) => e !== void 0 && e.some((e) => !d(e)), zt = (e, t) => z(t) ? m.Union(e, u, l) : e, Bt = (e) => m.Union(e, pt), Vt = (e) => m.Union(e, ht, gt), Ht = (e, t) => t === void 0 ? e : m.Union(e, wt), B = (e, t) => {
 	if (t === "stream") return e.error;
-	let n = Ot(e.error, e.guards);
+	let n = zt(e.error, e.guards);
 	if (t === "query") return n;
-	let r = t === "mutation" ? m.Union(kt(n), Pe, Ke) : n;
-	return jt(At(t === "mutation" && e.idempotencyScope === "connection" ? m.Union(r, p) : r), e.requiresApproval);
-}, Mt = (e, t) => R(Ot(e.errorSchema, e.guards), t), Nt = (e, t) => ({
+	let r = t === "mutation" ? m.Union(Bt(n), Ve, rt) : n;
+	return Ht(Vt(t === "mutation" && e.idempotencyScope === "connection" ? m.Union(r, p) : r), e.requiresApproval);
+}, Ut = (e, t) => R(zt(e.errorSchema, e.guards), t), Wt = (e, t) => ({
 	...e,
 	name: t
-}), Pt = (e, t) => h.make(e.name, {
+}), Gt = (e, t) => h.make(e.name, {
 	payload: S(e.input, e.name, z(e.guards)),
 	success: b(e.output),
 	error: R(B(e, "query"), t),
 	stream: !0
-}), Ft = (e, t) => h.make(e.name, {
+}), Kt = (e, t) => h.make(e.name, {
 	payload: S(e.input, e.name, z(e.guards)),
 	success: e.output,
 	error: R(B(e, "mutation"), t)
-}), It = (e, t) => h.make(e.name, {
+}), qt = (e, t) => h.make(e.name, {
 	payload: S(e.input, e.name, z(e.guards)),
 	success: e.output,
 	error: R(B(e, "action"), t)
-}), Lt = (e, t) => h.make(e.name, {
+}), Jt = (e, t) => h.make(e.name, {
 	payload: S(e.input, e.name, z(e.guards)),
 	success: e.element,
 	error: R(e.error, t),
 	stream: !0
-}), Rt = (e) => {
+}), Yt = (e) => {
 	if (typeof e != "object" || !e) return;
 	let t = e._tag;
 	return typeof t == "string" ? t : void 0;
-}, zt = (e) => {
+}, Xt = (e) => {
 	switch (e.kind) {
-		case "query": return Pt(e);
-		case "mutation": return Ft(e);
-		case "action": return It(e);
-		case "stream": return Lt(e);
+		case "query": return Gt(e);
+		case "mutation": return Kt(e);
+		case "action": return qt(e);
+		case "stream": return Jt(e);
 	}
-}, Bt = (e) => {
+}, Zt = (e) => {
 	let t = e.input, n = t === void 0 ? {} : { input: t }, r = e.output, i = r === void 0 ? {} : { output: r };
 	if (e.kind === "query") return {
 		kind: "query",
@@ -415,20 +421,22 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		...n,
 		...i
 	};
-	let a = e.target, o = e.idempotencyScope === void 0 ? {} : { idempotencyScope: e.idempotencyScope };
+	let a = e.target, o = e.idempotencyScope === void 0 ? {} : { idempotencyScope: e.idempotencyScope }, s = e.serialize === void 0 ? {} : { serialize: e.serialize };
 	if (a === void 0) return {
 		kind: "mutation",
 		...n,
 		...i,
-		...o
+		...o,
+		...s
 	};
-	let s = Array.isArray(a) ? a : [a];
+	let c = Array.isArray(a) ? a : [a];
 	return {
 		kind: "mutation",
 		...n,
 		...i,
 		...o,
-		targets: s.map((e) => ({
+		...s,
+		targets: c.map((e) => ({
 			table: e.table,
 			op: e.op,
 			..."order" in e && e.order !== void 0 ? { order: e.order } : {},
@@ -441,7 +449,7 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 			..."relations" in e && e.relations !== void 0 ? { relations: e.relations } : {}
 		}))
 	};
-}, Vt = 7500, Ht = (e) => typeof e == "object" && !!e && e.kind === "event", Ut = (e) => {
+}, Qt = 7500, $t = (e) => typeof e == "object" && !!e && e.kind === "event", en = (e) => {
 	if (e.name.length === 0) throw Error("defineEvent: `name` must not be empty");
 	if (/\s/.test(e.name)) throw Error(`defineEvent("${e.name}"): \`name\` must not contain whitespace.\n  The name is used as a broker subject segment. NATS refuses a subject with
   whitespace and delivers nothing — silently, and only on that broker, so an
@@ -476,60 +484,60 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		webhook: e.webhook,
 		delivery: e.delivery
 	};
-}, Wt = (e) => m.Struct({
+}, tn = (e) => m.Struct({
 	_tag: m.Literal("event"),
 	origin: m.String,
 	n: m.Number,
 	emittedAt: m.Number,
 	payload: e
-}), Gt = m.Struct({
+}), nn = m.Struct({
 	_tag: m.Literal("gap"),
 	missed: m.Number,
 	reason: m.Literal("buffer", "resume")
-}), Kt = m.Struct({ _tag: m.Literal("attached") }), qt = (e) => m.Union(Kt, Wt(e), Gt), Jt = m.Struct({
+}), rn = m.Struct({ _tag: m.Literal("attached") }), an = (e) => m.Union(rn, tn(e), nn), on = m.Struct({
 	origin: m.String,
 	n: m.Number
-}), Yt = (e) => m.Struct({
+}), sn = (e) => m.Struct({
 	key: e,
-	resume: m.optional(m.Array(Jt))
-}), Xt = (e, t) => {
+	resume: m.optional(m.Array(on))
+}), cn = (e, t) => {
 	let n = e.guards !== void 0 && e.guards.some((e) => !d(e)) ? m.Union(u, l) : m.Never, r = t && t.length > 0 ? m.Union(n, ...t) : n;
 	return h.make(e.name, {
-		payload: S(Yt(e.key), e.name, z(e.guards)),
-		success: qt(e.payload),
+		payload: S(sn(e.key), e.name, z(e.guards)),
+		success: an(e.payload),
 		error: r,
 		stream: !0
 	});
-}, Zt = class extends m.TaggedError()("EventPayloadInvalid", {
+}, ln = class extends m.TaggedError()("EventPayloadInvalid", {
 	event: m.String,
 	message: m.String
-}) {}, Qt = class extends m.TaggedError()("EventKeyInvalid", {
+}) {}, un = class extends m.TaggedError()("EventKeyInvalid", {
 	event: m.String,
 	message: m.String
-}) {}, $t = class extends m.TaggedError()("EventPayloadTooLarge", {
+}) {}, dn = class extends m.TaggedError()("EventPayloadTooLarge", {
 	event: m.String,
 	bytes: m.Number,
 	limit: m.Number
-}) {}, en = (e) => {
+}) {}, fn = (e) => {
 	if (typeof e != "object" || !e) return JSON.stringify(e) ?? "null";
 	let t = Object.entries(e).filter(([, e]) => e !== void 0).sort(([e], [t]) => e < t ? -1 : +(e > t));
 	return JSON.stringify(t);
-}, tn = "\0", nn = (e, t, n) => [
+}, pn = "\0", mn = (e, t, n) => [
 	e ?? "~",
 	t,
-	en(n)
-].join("\0"), rn = (e) => {
+	fn(n)
+].join("\0"), hn = (e) => {
 	let [t = "~", n = "", r = ""] = e.split("\0");
 	return {
 		tenantId: t === "~" ? null : t,
 		event: n,
 		key: r
 	};
-}, an = (e) => e.split("\0").join(" · "), V = Symbol.for("@voltro/protocol/workflow-access"), on = {
+}, gn = (e) => e.split("\0").join(" · "), V = Symbol.for("@voltro/protocol/workflow-access"), _n = {
 	guards: void 0,
 	openAccess: void 0,
 	internal: !1
-}, sn = (e, t) => {
+}, vn = (e, t) => {
 	let n = t.guards;
 	if (n !== void 0 && n.length === 0) throw Error(`workflow("${e}"): \`guards: []\` is empty, so it enforces nothing —\n  but it reads at the call site as if the start were protected. Omit the field
   and decide with \`openAccess\` or \`internal\`, or list the scopes that may start it.`);
@@ -549,16 +557,16 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		openAccess: t.openAccess?.trim(),
 		internal: t.internal === !0
 	};
-}, cn = (e, t) => {
+}, yn = (e, t) => {
 	Object.defineProperty(e, V, {
 		value: t,
 		enumerable: !1
 	});
 }, H = (e) => {
-	if (typeof e != "object" || !e) return on;
+	if (typeof e != "object" || !e) return _n;
 	let t = e[V];
-	return t === void 0 ? on : t;
-}, ln = (e) => {
+	return t === void 0 ? _n : t;
+}, bn = (e) => {
 	let t = H(e);
 	return {
 		name: e.name,
@@ -566,9 +574,9 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		guards: t.guards,
 		openAccess: t.openAccess
 	};
-}, un = (e) => typeof e == "object" && !!e && typeof e._tag == "string", dn = 64, U = (e, t = 0) => {
-	if (!un(e)) return String(e);
-	if (t >= dn) return "…";
+}, xn = (e) => typeof e == "object" && !!e && typeof e._tag == "string", Sn = 64, U = (e, t = 0) => {
+	if (!xn(e)) return String(e);
+	if (t >= Sn) return "…";
 	let n = t + 1, r = (t) => U(e[t], n), i = (t) => Array.isArray(e[t]) ? e[t] : [];
 	switch (e._tag) {
 		case "Transformation": return `T(${r("from")}->${r("to")})`;
@@ -595,23 +603,23 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		case "Declaration": return `D(${i("typeParameters").map((e) => U(e, n)).join(",")})`;
 		default: return String(e);
 	}
-}, fn = (e) => {
+}, Cn = (e) => {
 	let t = 2166136261;
 	for (let n = 0; n < e.length; n++) t ^= e.charCodeAt(n), t = Math.imul(t, 16777619) >>> 0;
 	return t.toString(16).padStart(8, "0");
-}, pn = (e) => fn([
+}, wn = (e) => Cn([
 	U(e.payloadSchema?.ast),
 	U(e.successSchema?.ast),
 	U(e.errorSchema?.ast)
-].join("\0")), mn = (e) => {
+].join("\0")), Tn = (e) => {
 	let t = {}, n = e.requests, r = n instanceof Map ? n.entries() : Array.isArray(n) ? n.map((e, t) => [t, e]) : [];
 	for (let [, e] of r) {
 		if (typeof e != "object" && typeof e != "function" || e === null) continue;
 		let n = e;
-		typeof n._tag == "string" && (t[n._tag] = pn(n));
+		typeof n._tag == "string" && (t[n._tag] = wn(n));
 	}
 	return t;
-}, hn = (e, t) => {
+}, En = (e, t) => {
 	let n = [], r = [];
 	for (let [i, a] of Object.entries(t)) {
 		let t = e[i];
@@ -621,18 +629,18 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		differing: n.sort(),
 		missingHere: r.sort()
 	};
-}, gn = (e) => e, _n = (e) => e, vn = (e) => {
+}, Dn = (e) => e, On = (e) => e, kn = (e) => {
 	let t = e.alias?.trim(), n = e.instance?.trim(), r = t !== void 0 && t !== "" ? t : e.base;
 	return n !== void 0 && n !== "" ? `${r}#${n}` : r;
-}, yn = (e) => {
+}, An = (e) => {
 	if (e.length !== 0) return (t, n) => e.reduceRight((e, t) => t(e, n), t);
-}, bn = (e, t) => {
-	let n = We.GenericTag(e);
+}, jn = (e, t) => {
+	let n = tt.GenericTag(e);
 	return {
 		Tag: n,
-		Live: Ge.succeed(n, t)
+		Live: nt.succeed(n, t)
 	};
-}, xn = (e, t, n) => {
+}, Mn = (e, t, n) => {
 	if (!t) return { ok: !0 };
 	let r = n === void 0 ? null : W(n);
 	if (!r) return {
@@ -642,7 +650,7 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	let i = t.trim();
 	if (i === "*" || i === "") return { ok: !0 };
 	let a = i.split(/\s+/).filter((e) => e.length > 0);
-	for (let i of a) if (!Sn(i, r)) return {
+	for (let i of a) if (!Nn(i, r)) return {
 		ok: !1,
 		reason: `plugin "${e}" requires framework ${t}, running ${n}`
 	};
@@ -655,7 +663,7 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		patch: Number(t[3]),
 		pre: t[4] ?? ""
 	} : null;
-}, G = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, Sn = (e, t) => {
+}, G = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, Nn = (e, t) => {
 	if (e === "*") return !0;
 	if (e.startsWith("^")) {
 		let n = W(e.slice(1));
@@ -677,50 +685,50 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	}
 	let r = W(e);
 	return r ? G(t, r) === 0 : !1;
-}, Cn = (e) => {
+}, Pn = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/-([a-zA-Z0-9])/g, (e, t) => t.toUpperCase());
-}, wn = (e) => {
+}, Fn = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/#/g, "--").replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
-}, Tn = Symbol.for("@voltro/protocol/pluginAliases"), K = () => {
-	let e = globalThis, t = e[Tn];
+}, In = Symbol.for("@voltro/protocol/pluginAliases"), K = () => {
+	let e = globalThis, t = e[In];
 	if (t instanceof Map) return t;
 	let n = /* @__PURE__ */ new Map();
-	return e[Tn] = n, n;
-}, En = (e) => {
+	return e[In] = n, n;
+}, Ln = (e) => {
 	let t = K();
 	for (let [n, r] of Object.entries(e)) {
 		if (r === "") continue;
 		let e = t.get(n);
 		e === void 0 ? t.set(n, /* @__PURE__ */ new Set([r])) : e.add(r);
 	}
-}, Dn = () => {
+}, Rn = () => {
 	K().clear();
-}, On = (e, t) => {
+}, zn = (e, t) => {
 	let n = K().get(e);
-	if (n === void 0 || n.size === 0) return `${Cn(e)}.${t}`;
+	if (n === void 0 || n.size === 0) return `${Pn(e)}.${t}`;
 	if (n.size === 1) return `${[...n][0]}.${t}`;
 	let r = [...n].filter((e) => !e.includes("#"));
 	if (r.length === 1) return `${r[0]}.${t}`;
 	throw Error(`[voltro] ${e} is installed more than once (${[...n].sort().join(", ")}) and no single install is the primary one, so a plugin hook cannot tell which of them it addresses. Call the route by its full tag instead — e.g. useSubscription(api, '${[...n].sort()[0]}.${t}').`);
-}, q = m.Literal("running", "succeeded", "failed", "cancelled", "suspended"), kn = m.Literal("cancel", "terminate", "abandon"), An = m.Struct({
+}, q = m.Literal("running", "succeeded", "failed", "cancelled", "suspended"), Bn = m.Literal("cancel", "terminate", "abandon"), Vn = m.Struct({
 	mode: m.String,
 	dueAt: m.NullOr(m.Number),
 	retryAfterMs: m.NullOr(m.Number),
 	intentId: m.NullOr(m.String)
-}), jn = m.Struct({
+}), Hn = m.Struct({
 	id: m.String,
 	workflowName: m.String,
 	executionId: m.NullOr(m.String),
 	status: m.Literal("running", "queued", "dropped", "skipped", "replayed"),
-	deferral: m.optional(An)
-}), Mn = (e, t) => {
+	deferral: m.optional(Vn)
+}), Un = (e, t) => {
 	let n = H(e);
 	return h.make(e.name, {
 		payload: S(e.payloadSchema, e.name, z(n.guards)),
-		success: jn,
-		error: Mt({
+		success: Hn,
+		error: Ut({
 			errorSchema: e.errorSchema,
 			guards: n.guards
 		}, t)
@@ -744,12 +752,12 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	durationMs: m.NullOr(m.Number),
 	traceId: m.NullOr(m.String),
 	parentExecutionId: m.NullOr(m.String),
-	parentClosePolicy: m.NullOr(kn)
-}), Nn = m.Struct({
+	parentClosePolicy: m.NullOr(Bn)
+}), Wn = m.Struct({
 	tag: m.optional(m.String),
 	status: m.optional(q),
 	limit: m.optional(m.Number)
-}), Pn = m.Struct({
+}), Gn = m.Struct({
 	id: m.String,
 	runId: m.String,
 	stepName: m.String,
@@ -764,7 +772,7 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	startedAt: m.Date,
 	completedAt: m.NullOr(m.Date),
 	durationMs: m.NullOr(m.Number)
-}), Fn = m.Struct({
+}), Kn = m.Struct({
 	id: m.String,
 	runId: m.String,
 	eventType: m.String,
@@ -772,7 +780,7 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	occurredAt: m.Date,
 	stepName: m.NullOr(m.String),
 	attempt: m.NullOr(m.Number)
-}), In = m.Struct({
+}), qn = m.Struct({
 	id: m.String,
 	name: m.String,
 	payload: m.Unknown,
@@ -780,7 +788,7 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	subject: m.NullOr(m.Unknown),
 	traceId: m.NullOr(m.String),
 	occurredAt: m.Date
-}), Ln = m.Struct({
+}), Jn = m.Struct({
 	id: m.String,
 	eventId: m.String,
 	eventName: m.String,
@@ -793,129 +801,129 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	errorMessage: m.NullOr(m.String),
 	createdAt: m.Date,
 	completedAt: m.NullOr(m.Date)
-}), Rn = m.Struct({ id: m.String }), Y = m.Struct({ runId: m.String }), zn = m.Struct({
+}), Yn = m.Struct({ id: m.String }), Y = m.Struct({ runId: m.String }), Xn = m.Struct({
 	name: m.optional(m.String),
 	limit: m.optional(m.Number)
-}), Bn = m.Struct({ eventId: m.String }), X = m.Struct({
+}), Zn = m.Struct({ eventId: m.String }), X = m.Struct({
 	workflowName: m.String,
 	executionId: m.String
-}), Vn = m.Struct({
+}), Qn = m.Struct({
 	id: m.String,
 	signalName: m.String,
 	payload: m.optional(m.Unknown)
-}), Hn = m.Struct({
+}), $n = m.Struct({
 	id: m.String,
 	updateName: m.String,
 	payload: m.optional(m.Unknown),
 	timeoutMs: m.optional(m.Number)
-}), Un = m.Struct({
+}), er = m.Struct({
 	eventId: m.String,
 	updateId: m.String,
 	completedEventId: m.String,
 	result: m.Unknown
-}), Wn = F({
+}), tr = F({
 	name: "__voltro.workflow.run",
 	source: "_voltro_workflow_runs",
-	input: Rn,
+	input: Yn,
 	output: m.Array(J)
-}), Gn = F({
+}), nr = F({
 	name: "__voltro.workflow.runs",
 	source: "_voltro_workflow_runs",
-	input: Nn,
+	input: Wn,
 	output: m.Array(J)
-}), Kn = F({
+}), rr = F({
 	name: "__voltro.workflow.run.steps",
 	source: "_voltro_workflow_run_steps",
 	input: Y,
-	output: m.Array(Pn)
-}), qn = F({
+	output: m.Array(Gn)
+}), ir = F({
 	name: "__voltro.workflow.run.events",
 	source: "_voltro_workflow_run_events",
 	input: Y,
-	output: m.Array(Fn)
-}), Jn = F({
+	output: m.Array(Kn)
+}), ar = F({
 	name: "__voltro.workflow.domainEvents",
 	source: "_voltro_workflow_events",
-	input: zn,
-	output: m.Array(In)
-}), Yn = F({
+	input: Xn,
+	output: m.Array(qn)
+}), or = F({
 	name: "__voltro.workflow.event.deliveries",
 	source: "_voltro_workflow_event_deliveries",
-	input: Bn,
-	output: m.Array(Ln)
-}), Xn = L({
+	input: Zn,
+	output: m.Array(Jn)
+}), sr = L({
 	name: "__voltro.workflow.cancel",
 	input: X,
 	output: m.Struct({ ok: m.Boolean })
-}), Zn = L({
+}), cr = L({
 	name: "__voltro.workflow.resume",
 	input: X,
 	output: m.Struct({ ok: m.Boolean })
-}), Qn = L({
+}), lr = L({
 	name: "__voltro.workflow.signal",
-	input: Vn,
+	input: Qn,
 	output: m.Struct({ eventId: m.String })
-}), $n = L({
+}), ur = L({
 	name: "__voltro.workflow.update",
-	input: Hn,
-	output: Un
-}), er = "__voltro.undo.log", tr = "__voltro.undo.apply", nr = "__voltro.undo.redo", rr = m.Struct({
+	input: $n,
+	output: er
+}), dr = "__voltro.undo.log", fr = "__voltro.undo.apply", pr = "__voltro.undo.redo", mr = m.Struct({
 	id: m.String,
 	tag: m.String,
 	label: m.NullOr(m.String),
 	undone: m.Boolean,
 	crossesAction: m.Boolean,
 	createdAt: m.String
-}), ir = class extends m.TaggedError()("UndoNotFound", { invocationId: m.String }) {}, ar = class extends m.TaggedError()("UndoForbidden", { invocationId: m.String }) {}, or = class extends m.TaggedError()("UndoConflict", {
+}), hr = class extends m.TaggedError()("UndoNotFound", { invocationId: m.String }) {}, gr = class extends m.TaggedError()("UndoForbidden", { invocationId: m.String }) {}, _r = class extends m.TaggedError()("UndoConflict", {
 	invocationId: m.String,
 	reason: m.Literal("conflict", "action")
-}) {}, Z = m.Union(ir, ar, or), sr = F({
-	name: er,
+}) {}, vr = m.Union(hr, gr, _r), yr = F({
+	name: dr,
 	source: "_voltro_undo_log",
 	input: m.Struct({ limit: m.optional(m.Number) }),
-	output: m.Array(rr),
+	output: m.Array(mr),
 	openAccess: "subject-scoped by construction: lists only the calling subject's own undoable actions"
-}), cr = I({
-	name: tr,
+}), br = I({
+	name: fr,
 	input: m.Struct({ invocationId: m.String }),
 	output: m.Struct({ ok: m.Boolean }),
-	error: Z,
+	error: vr,
 	openAccess: "subject-scoped by construction: undo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), lr = I({
-	name: nr,
+}), xr = I({
+	name: pr,
 	input: m.Struct({ invocationId: m.String }),
 	output: m.Struct({ ok: m.Boolean }),
-	error: Z,
+	error: vr,
 	openAccess: "subject-scoped by construction: redo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), ur = class extends m.TaggedError()("TenantScopeViolation", {
+}), Sr = class extends m.TaggedError()("TenantScopeViolation", {
 	table: m.String,
 	reason: m.String
-}) {}, dr = class extends m.TaggedError()("StoreOperationFailed", {
+}) {}, Cr = class extends m.TaggedError()("StoreOperationFailed", {
 	operation: m.String,
 	table: m.String,
 	cause: m.String
-}) {}, fr = class extends m.TaggedError()("NoRowFound", {
+}) {}, wr = class extends m.TaggedError()("NoRowFound", {
 	table: m.String,
 	found: m.Number
 }) {
 	get message() {
 		return this.found === 0 ? `expected exactly one row in '${this.table}', found none` : `expected exactly one row in '${this.table}', found more than one`;
 	}
-}, pr = class extends m.TaggedError()("TableValidationFailed", {
+}, Tr = class extends m.TaggedError()("TableValidationFailed", {
 	table: m.String,
 	summary: m.String,
 	issues: m.Array(m.Struct({
 		path: m.String,
 		message: m.String
 	}))
-}) {}, mr = class extends m.TaggedError()("TenantRowNotFound", {
+}) {}, Er = class extends m.TaggedError()("TenantRowNotFound", {
 	table: m.String,
 	id: m.String,
 	reason: m.String
-}) {}, hr = class extends m.TaggedError()("ServerOnlyColumnWrite", {
+}) {}, Dr = class extends m.TaggedError()("ServerOnlyColumnWrite", {
 	table: m.String,
 	columns: m.Array(m.String)
-}) {}, gr = class extends m.TaggedError()("ConstraintViolation", {
+}) {}, Or = class extends m.TaggedError()("ConstraintViolation", {
 	kind: m.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
 	table: m.String,
 	operation: m.String,
@@ -934,14 +942,14 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 			case "check": return `check constraint ${t}: the row does not satisfy it`;
 		}
 	}
-}, _r = "__voltro.approvals.pending", vr = "__voltro.approvals.decide", yr = F({
-	name: _r,
+}, Z = "__voltro.approvals.pending", kr = "__voltro.approvals.decide", Ar = F({
+	name: Z,
 	source: "_voltro_approvals",
 	input: m.Struct({ limit: m.optional(m.Number) }),
-	output: m.Array(ht),
+	output: m.Array(Et),
 	openAccess: "the answer is scoped to the caller — a row appears only if they requested it or hold its recorded approver scopes, so an anonymous caller sees nothing"
-}), br = I({
-	name: vr,
+}), jr = I({
+	name: kr,
 	input: m.Struct({
 		approvalId: m.String,
 		decision: m.Literal("approve", "reject"),
@@ -951,35 +959,35 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		approvalId: m.String,
 		status: m.Literal("approved", "rejected")
 	}),
-	error: mt,
+	error: Tt,
 	openAccess: "the approver authority is the PENDING ROW's own recorded scopes (plus an unconditional self-approval refusal), checked in-handler — a descriptor-level scope would have to be the union of every approval-requiring procedure in the app"
-}), xr = "__voltro.connections.list", Sr = "__voltro.connections.start", Cr = "__voltro.connections.submitToken", wr = "__voltro.connections.disconnect", Q = m.Literal("oauth2", "pat"), Tr = m.Literal("disconnected", "connected", "expired", "revoked", "error"), Er = m.Struct({
+}), Mr = "__voltro.connections.list", Nr = "__voltro.connections.start", Pr = "__voltro.connections.submitToken", Fr = "__voltro.connections.disconnect", Q = m.Literal("oauth2", "pat"), Ir = m.Literal("disconnected", "connected", "expired", "revoked", "error"), Lr = m.Struct({
 	connectionId: m.String,
 	kind: Q,
 	label: m.String,
-	status: Tr,
+	status: Ir,
 	accountId: m.NullOr(m.String),
 	accountLabel: m.NullOr(m.String),
 	scopes: m.Array(m.String),
 	expiresAt: m.NullOr(m.String),
 	lastError: m.NullOr(m.String),
 	connectedAt: m.NullOr(m.String)
-}), Dr = class extends m.TaggedError()("ConnectionNotDeclared", { connectionId: m.String }) {}, Or = class extends m.TaggedError()("ConnectionSubjectRequired", { connectionId: m.String }) {}, kr = class extends m.TaggedError()("ConnectionKindMismatch", {
+}), Rr = class extends m.TaggedError()("ConnectionNotDeclared", { connectionId: m.String }) {}, zr = class extends m.TaggedError()("ConnectionSubjectRequired", { connectionId: m.String }) {}, Br = class extends m.TaggedError()("ConnectionKindMismatch", {
 	connectionId: m.String,
 	expected: Q,
 	actual: Q
-}) {}, Ar = class extends m.TaggedError()("ConnectionHandshakeFailed", {
+}) {}, Vr = class extends m.TaggedError()("ConnectionHandshakeFailed", {
 	connectionId: m.String,
 	reason: m.String,
 	transient: m.Boolean
-}) {}, $ = m.Union(Dr, Or, kr, Ar), jr = F({
-	name: xr,
+}) {}, $ = m.Union(Rr, zr, Br, Vr), Hr = F({
+	name: Mr,
 	source: "_voltro_connections",
 	input: m.Struct({}),
-	output: m.Array(Er),
+	output: m.Array(Lr),
 	openAccess: "self-scoped read: projects the declared connections for the calling subject only (its own connect/disconnect state)"
-}), Mr = L({
-	name: Sr,
+}), Ur = L({
+	name: Nr,
 	input: m.Struct({
 		connectionId: m.String,
 		redirectTo: m.optional(m.String)
@@ -990,8 +998,8 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	}),
 	error: $,
 	openAccess: "self-service: begins an oauth handshake that stores a credential for the calling subject only; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Nr = I({
-	name: Cr,
+}), Wr = I({
+	name: Pr,
 	input: m.Struct({
 		connectionId: m.String,
 		token: m.String
@@ -999,20 +1007,20 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	output: m.Struct({ ok: m.Boolean }),
 	error: $,
 	openAccess: "self-service: stores a pasted token as the calling subject's own credential; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Pr = I({
-	name: wr,
+}), Gr = I({
+	name: Fr,
 	input: m.Struct({ connectionId: m.String }),
 	output: m.Struct({ ok: m.Boolean }),
 	error: $,
 	openAccess: "self-service: deletes only the calling subject's own credential row for this connection"
-}), Fr = (e) => {
+}), Kr = (e) => {
 	let t = e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : 0;
 	return Number.isNaN(t) ? 0 : t;
-}, Ir = 4001, Lr = /* @__PURE__ */ new Set(["/rpc", "/ws"]), Rr = (e) => {
+}, qr = 4001, Jr = /* @__PURE__ */ new Set(["/rpc", "/ws"]), Yr = (e) => {
 	if (!e.path.startsWith("/")) throw Error(`defineWebSocket: path must be absolute, got '${e.path}'`);
-	if (Lr.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
+	if (Jr.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
 	if (e.auth !== "subject" && e.auth !== "public") throw Error(`defineWebSocket: auth must be 'subject' or 'public' (explicitly — an unauthenticated socket has to be a decision somebody wrote down), got '${String(e.auth)}'`);
 	return e;
-}, zr = 1;
+}, Xr = 1;
 //#endregion
-export { Oe as ADMIN_SCOPE, Se as APIKEY_ISSUE_ORG_SCOPE, Ee as APIKEY_ISSUE_OTHER_SCOPE, _e as APIKEY_ISSUE_SELF_SCOPE, vr as APPROVALS_DECIDE_TAG, _r as APPROVALS_PENDING_TAG, mt as ApprovalDecisionErrors, pt as ApprovalErrors, C as ApprovalExpired, ft as ApprovalForbidden, ct as ApprovalNotFound, dt as ApprovalNotPending, ut as ApprovalRejected, st as ApprovalRequired, lt as ApprovalSelfApproval, w as ApprovalUnavailable, se as AuthMiddleware, nt as BusinessRuleViolation, xr as CONNECTIONS_LIST_TAG, wr as CONNECTION_DISCONNECT_TAG, Sr as CONNECTION_START_TAG, Cr as CONNECTION_SUBMIT_TOKEN_TAG, Ar as ConnectionHandshakeFailed, i as ConnectionInfo, r as ConnectionInfoMiddleware, Q as ConnectionKind, kr as ConnectionKindMismatch, Dr as ConnectionNotDeclared, Er as ConnectionState, Tr as ConnectionStatus, Or as ConnectionSubjectRequired, gr as ConstraintViolation, ie as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, ye as DEFAULT_SCOPE_CACHE_TTL_MS, tn as EVENT_ROUTE_SEP, Qt as EventKeyInvalid, Zt as EventPayloadInvalid, $t as EventPayloadTooLarge, Ir as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, e as IMPERSONATION_METADATA_KEY, Vt as MAX_EVENT_ENVELOPE_BYTES, Be as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, p as MutationConnectionRequired, Pe as MutationInFlight, fr as NoRowFound, zr as PROTOCOL_VERSION, ht as PendingApproval, T as REACTIVITY_CHANNEL_PREFIX, u as ScopeError, hr as ServerOnlyColumnWrite, dr as StoreOperationFailed, ve as Subject, ne as SubjectIdentity, re as SubjectService, pr as TableValidationFailed, mr as TenantRowNotFound, ur as TenantScopeViolation, tr as UNDO_APPLY_TAG, er as UNDO_LOG_TAG, nr as UNDO_REDO_TAG, l as Unauthenticated, or as UndoConflict, ar as UndoForbidden, rr as UndoLogEntry, ir as UndoNotFound, it as ValidationError, at as ValidationErrors, rt as ValidationIssue, V as WorkflowAccessProperty, X as WorkflowControlInputSchema, In as WorkflowDomainEventRowSchema, zn as WorkflowDomainEventsInputSchema, Bn as WorkflowEventDeliveriesInputSchema, Ln as WorkflowEventDeliveryRowSchema, kn as WorkflowParentClosePolicySchema, Fn as WorkflowRunEventRowSchema, jn as WorkflowRunHandleSchema, Rn as WorkflowRunRefSchema, J as WorkflowRunRowSchema, q as WorkflowRunStatusSchema, Pn as WorkflowRunStepRowSchema, Y as WorkflowRunTableRefSchema, Nn as WorkflowRunsInputSchema, Vn as WorkflowSignalInputSchema, An as WorkflowStartDeferralSchema, Hn as WorkflowUpdateInputSchema, Un as WorkflowUpdateResultSchema, It as actionToRpc, Ce as advisoryResourceGuardWarning, a as anonymousSubject, et as applyRowPatch, c as applyScopeDecision, br as approvalsDecideDescriptor, yr as approvalsPendingQueryDescriptor, te as assertAuthenticated, cn as attachWorkflowAccess, ze as beginIdempotent, xn as checkFrameworkCompat, De as checkGuards, pe as checkGuardsEffect, hn as compareSurfaces, ae as composeAuthStrategies, yn as composeRpcInterceptors, Pr as connectionDisconnectDescriptor, Mr as connectionStartDescriptor, Nr as connectionSubmitTokenDescriptor, jr as connectionsListQueryDescriptor, k as declaredReactivityChannelKeys, L as defineAction, Ut as defineEvent, I as defineMutation, gn as definePlugin, _n as definePluginRoute, bn as definePluginService, F as defineQuery, Dt as defineStream, Rr as defineWebSocket, Qe as diffRows, be as effectiveScopes, en as encodeEventKey, Rt as errorTag, Kt as eventAttached, Wt as eventEnvelope, Gt as eventGap, Jt as eventResumePoint, nn as eventRoute, qt as eventStreamEvent, Yt as eventSubscribeInput, Xt as eventToRpc, Ve as failIdempotent, ot as fieldIssuesOf, ke as findAdvisoryResourceGuards, Fe as finishIdempotent, an as formatEventRoute, me as getPolicyGuardResolver, he as getResourceScopeResolver, H as getWorkflowAccess, mn as groupShapeDigests, Et as hasAccessDecision, Ne as hasCallbackRoutes, we as hasEffectiveScope, z as hasEnforcedGuard, xe as hasScope, g as idToPath, Le as idempotencyScope, x as inputLabel, ge as isAuthenticatedCheck, Tt as isAuthenticatedGuard, Ht as isEventDescriptor, $e as isIdKeyed, d as isOpenAccess, de as isPolicyCheck, wt as isPolicyGuard, D as isReactivityChannel, O as isReactivityChannelKey, t as isSystemSubject, St as isWireReachable, le as makeScopeCache, Ue as memoryIdempotencyStore, Ae as missingAccessDecision, Ft as mutationToRpc, Bt as normalizeDescriptor, M as normalizeSource, f as openAccessSpec, s as orderByBearerPrefix, rn as parseEventRoute, _ as pathToId, Cn as pluginAlias, vn as pluginInstanceName, wn as pluginSlug, On as pluginTag, pn as procedureShapeDigest, xt as publishReactivity, He as publishServerError, Pt as queryToRpc, ce as rawImpersonationMark, yt as reactivityChannel, En as registerPluginAliases, fe as requireScope, Dn as resetPluginAliases, sn as resolveWorkflowAccess, Ye as rowPatchOpSchema, Xe as rowPatchSchema, U as schemaShape, ue as scopeCacheKey, Me as setEffectiveScopes, oe as setPolicyGuardResolver, n as setResourceScopeResolver, fn as shapeDigest, j as sourceKeys, Lt as streamToRpc, S as strictInput, o as subjectIdentity, je as subjectScopes, Re as subscribeServerErrors, b as subscriptionEvent, ee as systemSubject, Te as tenantScopedSubject, zt as toRpc, Fr as tsMs, bt as undeclaredChannelKeys, cr as undoApplyDescriptor, sr as undoLogQueryDescriptor, lr as undoRedoDescriptor, B as wireErrorUnion, Nt as withRpcTag, ln as workflowAccessDescriptor, Xn as workflowCancelDescriptor, Jn as workflowDomainEventsQueryDescriptor, Yn as workflowEventDeliveriesQueryDescriptor, Zn as workflowResumeDescriptor, qn as workflowRunEventsQueryDescriptor, Wn as workflowRunQueryDescriptor, Kn as workflowRunStepsQueryDescriptor, Gn as workflowRunsQueryDescriptor, Qn as workflowSignalDescriptor, Mn as workflowToRpc, $n as workflowUpdateDescriptor, Mt as workflowWireErrorUnion, Ie as wsMutationIdempotencyScope };
+export { Oe as ADMIN_SCOPE, Se as APIKEY_ISSUE_ORG_SCOPE, Ee as APIKEY_ISSUE_OTHER_SCOPE, _e as APIKEY_ISSUE_SELF_SCOPE, kr as APPROVALS_DECIDE_TAG, Z as APPROVALS_PENDING_TAG, Tt as ApprovalDecisionErrors, wt as ApprovalErrors, C as ApprovalExpired, Ct as ApprovalForbidden, yt as ApprovalNotFound, St as ApprovalNotPending, xt as ApprovalRejected, vt as ApprovalRequired, bt as ApprovalSelfApproval, w as ApprovalUnavailable, se as AuthMiddleware, pt as BusinessRuleViolation, Mr as CONNECTIONS_LIST_TAG, Fr as CONNECTION_DISCONNECT_TAG, Nr as CONNECTION_START_TAG, Pr as CONNECTION_SUBMIT_TOKEN_TAG, Vr as ConnectionHandshakeFailed, i as ConnectionInfo, r as ConnectionInfoMiddleware, Q as ConnectionKind, Br as ConnectionKindMismatch, Rr as ConnectionNotDeclared, Lr as ConnectionState, Ir as ConnectionStatus, zr as ConnectionSubjectRequired, Or as ConstraintViolation, ie as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, ye as DEFAULT_SCOPE_CACHE_TTL_MS, pn as EVENT_ROUTE_SEP, un as EventKeyInvalid, ln as EventPayloadInvalid, dn as EventPayloadTooLarge, qr as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, e as IMPERSONATION_METADATA_KEY, Xe as JSONAPI_MEDIA_TYPE, Qt as MAX_EVENT_ENVELOPE_BYTES, We as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, p as MutationConnectionRequired, Ve as MutationInFlight, wr as NoRowFound, Ge as PROBLEM_JSON, Xr as PROTOCOL_VERSION, Et as PendingApproval, T as REACTIVITY_CHANNEL_PREFIX, Je as REST_PROFILE_NAMES, u as ScopeError, Dr as ServerOnlyColumnWrite, Cr as StoreOperationFailed, ve as Subject, ne as SubjectIdentity, re as SubjectService, Tr as TableValidationFailed, Er as TenantRowNotFound, Sr as TenantScopeViolation, fr as UNDO_APPLY_TAG, dr as UNDO_LOG_TAG, pr as UNDO_REDO_TAG, l as Unauthenticated, _r as UndoConflict, gr as UndoForbidden, mr as UndoLogEntry, hr as UndoNotFound, ht as ValidationError, gt as ValidationErrors, mt as ValidationIssue, V as WorkflowAccessProperty, X as WorkflowControlInputSchema, qn as WorkflowDomainEventRowSchema, Xn as WorkflowDomainEventsInputSchema, Zn as WorkflowEventDeliveriesInputSchema, Jn as WorkflowEventDeliveryRowSchema, Bn as WorkflowParentClosePolicySchema, Kn as WorkflowRunEventRowSchema, Hn as WorkflowRunHandleSchema, Yn as WorkflowRunRefSchema, J as WorkflowRunRowSchema, q as WorkflowRunStatusSchema, Gn as WorkflowRunStepRowSchema, Y as WorkflowRunTableRefSchema, Wn as WorkflowRunsInputSchema, Qn as WorkflowSignalInputSchema, Vn as WorkflowStartDeferralSchema, $n as WorkflowUpdateInputSchema, er as WorkflowUpdateResultSchema, qt as actionToRpc, Ce as advisoryResourceGuardWarning, a as anonymousSubject, dt as applyRowPatch, c as applyScopeDecision, jr as approvalsDecideDescriptor, Ar as approvalsPendingQueryDescriptor, te as assertAuthenticated, yn as attachWorkflowAccess, Fe as beginIdempotent, Mn as checkFrameworkCompat, De as checkGuards, pe as checkGuardsEffect, En as compareSurfaces, ae as composeAuthStrategies, An as composeRpcInterceptors, Gr as connectionDisconnectDescriptor, Ur as connectionStartDescriptor, Wr as connectionSubmitTokenDescriptor, Hr as connectionsListQueryDescriptor, k as declaredReactivityChannelKeys, L as defineAction, en as defineEvent, I as defineMutation, Dn as definePlugin, On as definePluginRoute, jn as definePluginService, F as defineQuery, Rt as defineStream, Yr as defineWebSocket, lt as diffRows, be as effectiveScopes, fn as encodeEventKey, He as encodeRestError, Ie as encodeRestSuccess, Yt as errorTag, rn as eventAttached, tn as eventEnvelope, nn as eventGap, on as eventResumePoint, mn as eventRoute, an as eventStreamEvent, sn as eventSubscribeInput, cn as eventToRpc, Qe as failIdempotent, _t as fieldIssuesOf, ke as findAdvisoryResourceGuards, et as finishIdempotent, gn as formatEventRoute, me as getPolicyGuardResolver, he as getResourceScopeResolver, H as getWorkflowAccess, Tn as groupShapeDigests, Lt as hasAccessDecision, Ne as hasCallbackRoutes, we as hasEffectiveScope, z as hasEnforcedGuard, xe as hasScope, _ as idToPath, Le as idempotencyScope, x as inputLabel, ge as isAuthenticatedCheck, It as isAuthenticatedGuard, $t as isEventDescriptor, ut as isIdKeyed, d as isOpenAccess, de as isPolicyCheck, Ft as isPolicyGuard, D as isReactivityChannel, O as isReactivityChannelKey, t as isSystemSubject, Nt as isWireReachable, le as makeScopeCache, $e as memoryIdempotencyStore, Ae as missingAccessDecision, Kt as mutationToRpc, Ke as nextLink, Zt as normalizeDescriptor, M as normalizeSource, f as openAccessSpec, s as orderByBearerPrefix, hn as parseEventRoute, st as pathToId, Pn as pluginAlias, kn as pluginInstanceName, Fn as pluginSlug, zn as pluginTag, Ye as problemDetails, Re as problemTypeOf, wn as procedureShapeDigest, Mt as publishReactivity, Be as publishServerError, Gt as queryToRpc, ce as rawImpersonationMark, At as reactivityChannel, Ln as registerPluginAliases, fe as requireScope, Rn as resetPluginAliases, Ue as resolveRestFormat, vn as resolveWorkflowAccess, Ze as restViewSchema, at as rowPatchOpSchema, ot as rowPatchSchema, U as schemaShape, ue as scopeCacheKey, Me as setEffectiveScopes, oe as setPolicyGuardResolver, n as setResourceScopeResolver, Cn as shapeDigest, j as sourceKeys, Jt as streamToRpc, S as strictInput, o as subjectIdentity, je as subjectScopes, qe as subscribeServerErrors, b as subscriptionEvent, ee as systemSubject, Te as tenantScopedSubject, Xt as toRpc, ze as toSnakeCase, Kr as tsMs, jt as undeclaredChannelKeys, br as undoApplyDescriptor, yr as undoLogQueryDescriptor, xr as undoRedoDescriptor, B as wireErrorUnion, Wt as withRpcTag, bn as workflowAccessDescriptor, sr as workflowCancelDescriptor, ar as workflowDomainEventsQueryDescriptor, or as workflowEventDeliveriesQueryDescriptor, cr as workflowResumeDescriptor, ir as workflowRunEventsQueryDescriptor, tr as workflowRunQueryDescriptor, rr as workflowRunStepsQueryDescriptor, nr as workflowRunsQueryDescriptor, lr as workflowSignalDescriptor, Un as workflowToRpc, ur as workflowUpdateDescriptor, Ut as workflowWireErrorUnion, Pe as wsMutationIdempotencyScope };